It depends on your threat model. If you're an average Twitter user whose worst threat is a password spraying attack then sure, it's better than nothing. If you

It depends on your threat model. If you're an average Twitter user whose worst threat is a password spraying attack then sure, it's better than nothing. If you're someone who is likely to be targeted specifically (you're a known crypto 'investor', you're a celebrity of some kind or another) then it's a disaster. You're much better off just having a high-quality, unique password than you are with a high-quality, unique password on a site that with a password reset flow via SMS 2FA.